policy-samples-20231129-3

davidsmatlak · davidsmatlak · commit a21cb5fc4220 · 2023-11-29T10:57:03.000-08:00
diff --git a/includes/policy/reference/byrp/microsoft.hdinsight.md b/includes/policy/reference/byrp/microsoft.hdinsight.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.healthbot.md b/includes/policy/reference/byrp/microsoft.healthbot.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.healthcareapis.md b/includes/policy/reference/byrp/microsoft.healthcareapis.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.hybridcompute.md b/includes/policy/reference/byrp/microsoft.hybridcompute.md
diff --git a/includes/policy/reference/byrp/microsoft.insights.md b/includes/policy/reference/byrp/microsoft.insights.md
diff --git a/includes/policy/reference/byrp/microsoft.iotcentral.md b/includes/policy/reference/byrp/microsoft.iotcentral.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.keyvault.data.md b/includes/policy/reference/byrp/microsoft.keyvault.data.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.keyvault.md b/includes/policy/reference/byrp/microsoft.keyvault.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.kubernetes.md b/includes/policy/reference/byrp/microsoft.kubernetes.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.kubernetesconfiguration.md b/includes/policy/reference/byrp/microsoft.kubernetesconfiguration.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.kusto.md b/includes/policy/reference/byrp/microsoft.kusto.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.labservices.md b/includes/policy/reference/byrp/microsoft.labservices.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.loadtestservice.md b/includes/policy/reference/byrp/microsoft.loadtestservice.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.logic.md b/includes/policy/reference/byrp/microsoft.logic.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.machinelearningservices.data.md b/includes/policy/reference/byrp/microsoft.machinelearningservices.data.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.machinelearningservices.md b/includes/policy/reference/byrp/microsoft.machinelearningservices.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.maintenance.md b/includes/policy/reference/byrp/microsoft.maintenance.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.managedhsm.data.md b/includes/policy/reference/byrp/microsoft.managedhsm.data.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.managedidentity.md b/includes/policy/reference/byrp/microsoft.managedidentity.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.managedservices.md b/includes/policy/reference/byrp/microsoft.managedservices.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.maps.md b/includes/policy/reference/byrp/microsoft.maps.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.media.md b/includes/policy/reference/byrp/microsoft.media.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.netapp.md b/includes/policy/reference/byrp/microsoft.netapp.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.network.md b/includes/policy/reference/byrp/microsoft.network.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.operationalinsights.md b/includes/policy/reference/byrp/microsoft.operationalinsights.md
@@ -2,18 +2,18 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
 
 |Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |
 |---|---|---|---|
-|[\[Preview\]: Configure the Microsoft Defender for SQL Log Analytics workspace](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F242300d6-1bfc-4d64-8d01-cee583709ebd) |Microsoft Defender for SQL collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Create a resource group and Log Analytics workspace in the same region as the machine. |DeployIfNotExists, Disabled |[1.1.1-preview](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Security%20Center/MDC_DfSQL_DeployDefaultWorkspace.json) |
 |[Azure Monitor Logs clusters should be created with infrastructure-encryption enabled (double encryption)](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fea0dfaed-95fb-448c-934e-d6e713ce393d) |To ensure secure data encryption is enabled at the service level and the infrastructure level with two different encryption algorithms and two different keys, use an Azure Monitor dedicated cluster. This option is enabled by default when supported at the region, see [https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview](../../../../articles/azure-monitor/platform/customer-managed-keys.md#customer-managed-key-overview). |audit, Audit, deny, Deny, disabled, Disabled |[1.1.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/LogAnalyticsClusters_CMKDoubleEncryptionEnabled_Deny.json) |
 |[Azure Monitor Logs clusters should be encrypted with customer-managed key](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F1f68a601-6e6d-4e42-babf-3f643a047ea2) |Create Azure Monitor logs cluster with customer-managed keys encryption. By default, the log data is encrypted with service-managed keys, but customer-managed keys are commonly required to meet regulatory compliance. Customer-managed key in Azure Monitor gives you more control over the access to you data, see [https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys](../../../../articles/azure-monitor/platform/customer-managed-keys.md). |audit, Audit, deny, Deny, disabled, Disabled |[1.1.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/LogAnalyticsClusters_CMKEnabled_Deny.json) |
 |[Configure Azure Log Analytics workspaces to disable public network access for log ingestion and querying](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fd3ba9c42-9dd5-441a-957c-274031c750c0) |Improve workspace security by blocking log ingestion and querying from public networks. Only private-link connected networks will be able to ingest and query logs on this workspace. Learn more at [https://aka.ms/AzMonPrivateLink#configure-log-analytics](https://aka.ms/AzMonPrivateLink#configure-log-analytics). |Modify, Disabled |[1.1.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/LogAnalyticsWorkspaces_NetworkAccessEnabled_Modify.json) |
 |[Configure Log Analytics workspace and automation account to centralize logs and monitoring](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F8e3e61b3-0b32-22d5-4edf-55f87fdb5955) |Deploy resource group containing Log Analytics workspace and linked automation account to centralize logs and monitoring. The automation account is aprerequisite for solutions like Updates and Change Tracking. |DeployIfNotExists, AuditIfNotExists, Disabled |[2.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/LogAnalyticsWorkspaces_DefaultWorkspace_deployIfNotExists.json) |
+|[Configure the Microsoft Defender for SQL Log Analytics workspace](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F242300d6-1bfc-4d64-8d01-cee583709ebd) |Microsoft Defender for SQL collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Create a resource group and Log Analytics workspace in the same region as the machine. |DeployIfNotExists, Disabled |[1.1.2](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Security%20Center/MDC_DfSQL_DeployDefaultWorkspace.json) |
 |[Enable logging by category group for Log Analytics workspaces (microsoft.operationalinsights/workspaces) to Event Hub](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fa853abad-dfa4-4bf5-aaa1-04cb10c02d23) |Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This policy deploys a diagnostic setting using a category group to route logs to an Event Hub for Log Analytics workspaces (microsoft.operationalinsights/workspaces). |DeployIfNotExists, AuditIfNotExists, Disabled |[1.1.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/DiagSettings_eventHub_operationalinsights-workspaces_DINE.json) |
 |[Enable logging by category group for Log Analytics workspaces (microsoft.operationalinsights/workspaces) to Log Analytics](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F818719e5-1338-4776-9a9d-3c31e4df5986) |Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This policy deploys a diagnostic setting using a category group to route logs to a Log Analytics workspace for Log Analytics workspaces (microsoft.operationalinsights/workspaces). |DeployIfNotExists, AuditIfNotExists, Disabled |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/DiagSettings_logAnalytics_operationalinsights-workspaces_DINE.json) |
 |[Enable logging by category group for Log Analytics workspaces (microsoft.operationalinsights/workspaces) to Storage](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Ffe85de62-a656-4b79-9d94-d95c89319bd9) |Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This policy deploys a diagnostic setting using a category group to route logs to a Storage Account for Log Analytics workspaces (microsoft.operationalinsights/workspaces). |DeployIfNotExists, AuditIfNotExists, Disabled |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/DiagSettings_storage_operationalinsights-workspaces_DINE.json) |
diff --git a/includes/policy/reference/byrp/microsoft.operationsmanagement.md b/includes/policy/reference/byrp/microsoft.operationsmanagement.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.portal.md b/includes/policy/reference/byrp/microsoft.portal.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.purview.md b/includes/policy/reference/byrp/microsoft.purview.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.recoveryservices.md b/includes/policy/reference/byrp/microsoft.recoveryservices.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.resources.md b/includes/policy/reference/byrp/microsoft.resources.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.search.md b/includes/policy/reference/byrp/microsoft.search.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.security.md b/includes/policy/reference/byrp/microsoft.security.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.servicebus.md b/includes/policy/reference/byrp/microsoft.servicebus.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
@@ -11,9 +11,9 @@ ms.custom: generated
 |---|---|---|---|
 |[\[Preview\]: Service Bus should be Zone Redundant](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fd3ee5dcf-0c6d-49ab-aee4-f250583a7bdc) |Service Bus can be configured to be Zone Redundant or not. When the 'zoneRedundant' property is set to 'false' for a Service Bus, it means it is not configured for Zone Redundancy. This policy identifies and enforces the Zone Redundancy configuration for Service Bus instances. |Audit, Deny, Disabled |[1.0.0-preview](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Resilience/ServiceBus_namespaces_ZoneRedundant_Audit.json) |
 |[All authorization rules except RootManageSharedAccessKey should be removed from Service Bus namespace](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fa1817ec0-a368-432a-8057-8371e17ac6ee) |Service Bus clients should not use a namespace level access policy that provides access to all queues and topics in a namespace. To align with the least privilege security model, you should create access policies at the entity level for queues and topics to provide access to only the specific entity |Audit, Deny, Disabled |[1.0.1](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_AuditNamespaceAccessRules_Audit.json) |
-|[Azure Service Bus namespaces should have local authentication methods disabled](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fcfb11c26-f069-4c14-8e36-56c394dae5af) |Disabling local authentication methods improves security by ensuring that Azure Service Bus namespaces exclusively require Azure Active Directory identities for authentication. Learn more at: [https://aka.ms/disablelocalauth-sb](https://aka.ms/disablelocalauth-sb). |Audit, Deny, Disabled |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_DisableLocalAuth_AuditDeny.json) |
+|[Azure Service Bus namespaces should have local authentication methods disabled](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fcfb11c26-f069-4c14-8e36-56c394dae5af) |Disabling local authentication methods improves security by ensuring that Azure Service Bus namespaces exclusively require Microsoft Entra ID identities for authentication. Learn more at: [https://aka.ms/disablelocalauth-sb](https://aka.ms/disablelocalauth-sb). |Audit, Deny, Disabled |[1.0.1](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_DisableLocalAuth_AuditDeny.json) |
 |[Azure Service Bus namespaces should use private link](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F1c06e275-d63d-4540-b761-71f364c2111d) |Azure Private Link lets you connect your virtual network to Azure services without a public IP address at the source or destination. The Private Link platform handles the connectivity between the consumer and services over the Azure backbone network. By mapping private endpoints to Service Bus namespaces, data leakage risks are reduced. Learn more at: [https://docs.microsoft.com/azure/service-bus-messaging/private-link-service](../../../../articles/service-bus-messaging/private-link-service.md). |AuditIfNotExists, Disabled |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_PrivateEndpoint_Audit.json) |
-|[Configure Azure Service Bus namespaces to disable local authentication](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F910711a6-8aa2-4f15-ae62-1e5b2ed3ef9e) |Disable local authentication methods so that your Azure ServiceBus namespaces exclusively require Azure Active Directory identities for authentication. Learn more at: [https://aka.ms/disablelocalauth-sb](https://aka.ms/disablelocalauth-sb). |Modify, Disabled |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_DisableLocalAuth_Modify.json) |
+|[Configure Azure Service Bus namespaces to disable local authentication](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F910711a6-8aa2-4f15-ae62-1e5b2ed3ef9e) |Disable local authentication methods so that your Azure ServiceBus namespaces exclusively require Microsoft Entra ID identities for authentication. Learn more at: [https://aka.ms/disablelocalauth-sb](https://aka.ms/disablelocalauth-sb). |Modify, Disabled |[1.0.1](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_DisableLocalAuth_Modify.json) |
 |[Configure Service Bus namespaces with private endpoints](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F7d890f7f-100c-473d-baa1-2777e2266535) |Private endpoints connect your virtual network to Azure services without a public IP address at the source or destination. By mapping private endpoints to Service Bus namespaces, you can reduce data leakage risks. Learn more at: [https://docs.microsoft.com/azure/service-bus-messaging/private-link-service](../../../../articles/service-bus-messaging/private-link-service.md). |DeployIfNotExists, Disabled |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Bus/ServiceBus_PrivateEndpoint_DeployIfNotExists.json) |
 |[Deploy Diagnostic Settings for Service Bus to Event Hub](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F6b51af03-9277-49a9-a3f8-1c69c9ff7403) |Deploys the diagnostic settings for Service Bus to stream to a regional Event Hub when any Service Bus which is missing this diagnostic settings is created or updated. |DeployIfNotExists, Disabled |[2.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/ServiceBus_DeployDiagnosticLog_Deploy_EventHub.json) |
 |[Deploy Diagnostic Settings for Service Bus to Log Analytics workspace](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F04d53d87-841c-4f23-8a5b-21564380b55e) |Deploys the diagnostic settings for Service Bus to stream to a regional Log Analytics workspace when any Service Bus which is missing this diagnostic settings is created or updated. |DeployIfNotExists, Disabled |[2.1.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/ServiceBus_DeployDiagnosticLog_Deploy_LogAnalytics.json) |
diff --git a/includes/policy/reference/byrp/microsoft.servicefabric.md b/includes/policy/reference/byrp/microsoft.servicefabric.md
@@ -2,7 +2,7 @@
 author: davidsmatlak
 ms.service: azure-policy
 ms.topic: include
-ms.date: 11/21/2023
+ms.date: 11/29/2023
 ms.author: davidsmatlak
 ms.custom: generated
 ---
diff --git a/includes/policy/reference/byrp/microsoft.signalrservice.md b/includes/policy/reference/byrp/microsoft.signalrservice.md
diff --git a/includes/policy/reference/byrp/microsoft.solutions.md b/includes/policy/reference/byrp/microsoft.solutions.md
diff --git a/includes/policy/reference/byrp/microsoft.sql.md b/includes/policy/reference/byrp/microsoft.sql.md
diff --git a/includes/policy/reference/byrp/microsoft.storage.md b/includes/policy/reference/byrp/microsoft.storage.md
diff --git a/includes/policy/reference/byrp/microsoft.storagecache.md b/includes/policy/reference/byrp/microsoft.storagecache.md
diff --git a/includes/policy/reference/byrp/microsoft.storagesync.md b/includes/policy/reference/byrp/microsoft.storagesync.md
diff --git a/includes/policy/reference/byrp/microsoft.streamanalytics.md b/includes/policy/reference/byrp/microsoft.streamanalytics.md
diff --git a/includes/policy/reference/byrp/microsoft.synapse.md b/includes/policy/reference/byrp/microsoft.synapse.md
diff --git a/includes/policy/reference/byrp/microsoft.virtualmachineimages.md b/includes/policy/reference/byrp/microsoft.virtualmachineimages.md
diff --git a/includes/policy/reference/byrp/microsoft.web.md b/includes/policy/reference/byrp/microsoft.web.md
diff --git a/includes/policy/reference/custom/init-asc.md b/includes/policy/reference/custom/init-asc.md
