Merge pull request #153622 from aletheatoh/policy

GitHubber17 · web-flow · commit cf5d24e65337 · 2021-04-07T20:35:53.000-07:00
'policies'
diff --git a/articles/ddos-protection/TOC.yml b/articles/ddos-protection/TOC.yml
@@ -49,6 +49,8 @@
       href: ddos-protection-partner-onboarding.md
 - name: Reference
   items:
+  - name: Azure Policy built-ins
+    href: policy-reference.md
   - name: Azure CLI
     href: /cli/azure/network/ddos-protection
   - name: Azure PowerShell
diff --git a/articles/ddos-protection/ddos-faq.md b/articles/ddos-protection/ddos-faq.md
@@ -3,7 +3,7 @@ title: Azure DDoS Protection Standard frequent asked questions
 description: Frequently asked questions about the Azure DDoS Protection Standard, which helps provide defense against DDoS attacks.
 services: virtual-network
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: virtual-network
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/ddos-protection-overview.md b/articles/ddos-protection/ddos-protection-overview.md
@@ -3,7 +3,7 @@ title: Azure DDoS Protection Standard Overview
 description: Learn how the Azure DDoS Protection Standard, when combined with application design best practices, provides defense against DDoS attacks.
 services: virtual-network
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: virtual-network
 ms.devlang: na
 ms.topic: conceptual
diff --git a/articles/ddos-protection/ddos-protection-partner-onboarding.md b/articles/ddos-protection/ddos-protection-partner-onboarding.md
@@ -3,7 +3,7 @@ title: Partnering with Azure DDoS Protection Standard
 description: "Understand partnering opportunities enabled by Azure DDoS Protection Standard."
 ms.service: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 mms.devlang: na
 ms.topic: how-to
 ms.date: 08/28/2020
diff --git a/articles/ddos-protection/ddos-protection-reference-architectures.md b/articles/ddos-protection/ddos-protection-reference-architectures.md
@@ -3,7 +3,7 @@ title: Azure DDoS Protection reference architectures
 description: Learn Azure DDoS protection reference architectures.
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/ddos-protection-standard-features.md b/articles/ddos-protection/ddos-protection-standard-features.md
@@ -3,7 +3,7 @@ title: Azure DDoS Protection features
 description: Learn Azure DDoS Protection features
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: conceptual
diff --git a/articles/ddos-protection/ddos-rapid-response.md b/articles/ddos-protection/ddos-rapid-response.md
@@ -3,7 +3,7 @@ title: Azure DDoS Rapid Response
 description: Learn how to engage DDoS experts during an active attack for specialized support.
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/ddos-response-strategy.md b/articles/ddos-protection/ddos-response-strategy.md
@@ -3,7 +3,7 @@ title: Components of a DDoS response strategy
 description: Learn what how to use Azure DDoS Protection Standard to respond to DDoS attacks.
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/fundamental-best-practices.md b/articles/ddos-protection/fundamental-best-practices.md
@@ -3,7 +3,7 @@ title: Azure DDoS Protection fundamental best practices
 description: Learn the best security practices using DDoS protection.
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/index.yml b/articles/ddos-protection/index.yml
@@ -5,7 +5,7 @@ summary: "Learn how the Azure DDoS Protection Standard, when combined with appli
 metadata: 
   description: "Learn how the Azure DDoS Protection Standard, when combined with application design best practices, provides defense against DDoS attacks."
   keywords: azure ddos protection standard
-  author: yitoh
+  author: aletheatoh
   ms.author: yitoh
   ms.date: 09/04/2019
   ms.service: ddos-protection
diff --git a/articles/ddos-protection/manage-ddos-protection-cli.md b/articles/ddos-protection/manage-ddos-protection-cli.md
@@ -3,7 +3,7 @@ title: Create and configure an Azure DDoS Protection plan using Azure CLI
 description: Learn how to create a DDoS Protection Plan using Azure CLI
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/manage-ddos-protection-powershell.md b/articles/ddos-protection/manage-ddos-protection-powershell.md
@@ -3,7 +3,7 @@ title: Create and configure an Azure DDoS Protection plan using Azure PowerShell
 description: Learn how to create a DDoS Protection Plan using Azure PowerShell
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/policy-reference.md b/articles/ddos-protection/policy-reference.md
@@ -0,0 +1,39 @@
+---
+title: Built-in policy definitions for Azure DDoS Protection Standard
+description: Lists Azure Policy built-in policy definitions for Azure DDoS Protection Standard. These built-in policy definitions provide common approaches to managing your Azure resources.
+services: ddos-protection
+documentationcenter: na
+author: aletheatoh
+ms.service: ddos-protection
+ms.devlang: na
+ms.tgt_pltfrm: na
+ms.workload: infrastructure-services
+ms.date: 04/07/2021
+ms.author: yitoh
+ms.custom: subject-policy-reference
+ms.topic: include
+---
+
+# Azure Policy built-in definitions for Azure DDoS Protection Standard
+
+This page is an index of [Azure Policy](../governance/policy/overview.md) built-in policy
+definitions for Azure DDoS Protection Standard. For additional Azure Policy built-ins for other services, see
+[Azure Policy built-in definitions](../governance/policy/samples/built-in-policies.md).
+
+The name of each built-in policy definition links to the policy definition in the Azure portal. Use
+the link in the **Version** column to view the source on the
+[Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+
+## Azure DDoS Protection Standard
+
+|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |
+|---|---|---|---|
+|[Virtual networks should be protected by Azure DDoS Protection Standard](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d)|Protect your virtual networks against volumetric and protocol attacks with Azure DDoS Protection Standard. For more information, visit [https://aka.ms/ddosprotectiondocs](https://aka.ms/ddosprotectiondocs).|Modify, Audit, Disabled|[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Network/VirtualNetworkDdosStandard_Audit.json)|
+|[Public IP addresses should have resource logs enabled for Azure DDoS Protection Standard](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F752154a7-1e0f-45c6-a880-ac75a7e4f648)|Enable resource logs for public IP addresses in diagnostic settings to stream to a Log Analytics workspace. Get detailed visibility into attack traffic and actions taken to mitigate DDoS attacks via notifications, reports and flow logs.|AuditIfNotExists, DeployIfNotExists, Disabled|[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/PublicIpDdosLogging_Audit.json)|
+
+
+## Next steps
+
+- See the built-ins on the [Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+- Review the [Azure Policy definition structure](../governance/policy/concepts/definition-structure.md).
+- Review [Understanding policy effects](../governance/policy/concepts/effects.md).
diff --git a/articles/ddos-protection/telemetry.md b/articles/ddos-protection/telemetry.md
@@ -3,7 +3,7 @@ title: View and configure DDoS protection telemetry for Azure DDoS Protection St
 description: Learn how to view and configure DDoS protection telemetry for Azure DDoS Protection Standard.
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/test-through-simulations.md b/articles/ddos-protection/test-through-simulations.md
@@ -3,7 +3,7 @@ title: Azure DDoS Protection simulation testing
 description: Learn about how to test through simulations
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
diff --git a/articles/ddos-protection/types-of-attacks.md b/articles/ddos-protection/types-of-attacks.md
@@ -3,7 +3,7 @@ title: Types of attacks Azure DDoS Protection Standard mitigates
 description: Learn what types of attacks Azure DDoS Protection Standard protects against.
 services: ddos-protection
 documentationcenter: na
-author: yitoh
+author: aletheatoh
 ms.service: ddos-protection
 ms.devlang: na
 ms.topic: article
