You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
## Policy 1 - Azure Backup should be enabled for Managed Disks
18
18
19
-
It is an [audit-only](../governance/policy/concepts/effects.md#audit) policy. This policy identifies which disks don't have backup enabled but doesn't automatically configure backups for these disks. It is useful when you're only looking to evaluate the overall compliance of the disks but not looking to take action immediately.
19
+
Use an [audit-only](../governance/policy/concepts/effects.md#audit) policy to identify disks which don't have backup enabled. However, this policy doesn't automatically configure backups for these disks. It is useful when you're only looking to evaluate the overall compliance of the disks but not looking to take action immediately.
20
20
21
21
## Policy 2 - Configure backup for Azure Disks (Managed Disks) with a given tag to an existing backup vault in the same region
22
22
@@ -28,7 +28,9 @@ This policy works the same as Policy 2 above, with the only difference being tha
28
28
29
29
## Supported Scenarios
30
30
31
-
* The built-in policy is currently supported only for Azure Managed Disks. Users must take care to ensure that the Backup Vault and backup policy specified during assignment is a Disk backup policy.
31
+
Before you audit and enforce backups for AKS clusters, see the following scenarios supported:
32
+
33
+
* The built-in policy is currently supported only for Azure Managed Disks. Ensure that the Backup Vault and backup policy specified during assignment is a Disk backup policy.
32
34
33
35
* The Policies 2 and 3 can be assigned to a single location and subscription at a time. To enable backup for Disks across locations and subscriptions, multiple instances of the policy assignment need to be created, one for each combination of location and subscription.
34
36
@@ -41,25 +43,35 @@ This policy works the same as Policy 2 above, with the only difference being tha
41
43
42
44
The below steps describe the end-to-end process of assigning Policy 2: **Configure backup on Managed Disks with a given tag to an existing backup vault in the same location to a given scope** . Similar instructions are applicable for the other policies. Once assigned, any new Managed Disk created in the scope is automatically configured for backup.
43
45
46
+
To assign Policy 2, follow these steps:
47
+
44
48
1. Sign in to the Azure portal and navigate to the **Policy** Dashboard.
49
+
45
50
2. Select **Definitions** in the left menu to get a list of all built-in policies across Azure Resources.
51
+
46
52
3. Filter the list for **Category=Backup** and select the policy named *Configure backup on Managed Disks with a given tag to an existing backup vault in the same location to a given scope*.
47
53
:::image type="content" source="./media/backup-managed-disks-policy/policy-dashboard-inline.png" alt-text="Screenshot showing how to filter the list by category on Policy dashboard." lightbox="./media/backup-azure-auto-enable-backup/policy-dashboard-expanded.png":::
54
+
48
55
4. Select the name of the policy. You're then redirected to the detailed definition for this policy.
49
56

57
+
50
58
5. Select the **Assign** button at the top of the pane. This redirects you to the **Assign Policy** pane.
59
+
51
60
6. Under **Basics**, select the three dots next to the **Scope** field. It opens up a right context pane where you can select the subscription for the policy to be applied on. You can also optionally select a resource group, so that the policy is applied only for Disks in a particular resource group.
52
61

62
+
53
63
7. In the **Parameters** tab, choose a location from the drop-down, and select the vault, backup policy to which the Disks in the scope must be associated, and resource group where these disk snapshots are stored. You can also choose to specify a tag name and an array of tag values. A Disk that contains any of the specified values for the given tag is included in the scope of the policy assignment.
54
64

65
+
55
66
8. Ensure that **Effect** is set to deployIfNotExists.
67
+
56
68
9. Navigate to **Review+create** and select **Create**.
57
69
58
70
> [!NOTE]
59
71
>
60
-
> -Azure Policy can also be used on existing Disks, using [remediation](../governance/policy/how-to/remediate-resources.md).
72
+
> -Use [remediation](../governance/policy/how-to/remediate-resources.md) to enable policy of exisiting Managed Disks.
61
73
> - It's recommended that this policy not be assigned to more than 200 Disks at a time. If the policy is assigned to more than 200 Disks, it can result in the backup being triggered a few hours later than that specified by the schedule.
62
74
63
75
## Next step
64
76
65
-
[Learn more about Azure Policy](../governance/policy/overview.md)
77
+
[Learn more about Azure Policy](../governance/policy/overview.md)
0 commit comments