Skip to content

Commit d293b88

Browse files
Albertyang0Albertyang0
committed
Policy samples 2025-06-23-3
1 parent c4d7609 commit d293b88

File tree

82 files changed

+183
-360
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

82 files changed

+183
-360
lines changed

‎includes/policy/reference/byrp/microsoft.dbformariadb.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.dbformysql.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |
@@ -29,5 +27,5 @@ ms.custom:
2927
|[MySQL server should use a virtual network service endpoint](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F3375856c-3824-4e0e-ae6a-79e011dd4c47) |Virtual network based firewall rules are used to enable traffic from a specific subnet to Azure Database for MySQL while ensuring the traffic stays within the Azure boundary. This policy provides a way to audit if the Azure Database for MySQL has virtual network service endpoint being used. |AuditIfNotExists, Disabled |[1.0.2](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/MySQL_VirtualNetworkServiceEndpoint_Audit.json) |
3028
|[MySQL servers should use customer-managed keys to encrypt data at rest](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F83cef61d-dbd1-4b20-a4fc-5fbc7da10833) |Use customer-managed keys to manage the encryption at rest of your MySQL servers. By default, the data is encrypted at rest with service-managed keys, but customer-managed keys are commonly required to meet regulatory compliance standards. Customer-managed keys enable the data to be encrypted with an Azure Key Vault key created and owned by you. You have full control and responsibility for the key lifecycle, including rotation and management. |AuditIfNotExists, Disabled |[1.0.4](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/MySQL_EnableByok_Audit.json) |
3129
|[Private endpoint should be enabled for MySQL servers](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F7595c971-233d-4bcf-bd18-596129188c49) |Private endpoint connections enforce secure communication by enabling private connectivity to Azure Database for MySQL. Configure a private endpoint connection to enable access to traffic coming only from known networks and prevent access from all other IP addresses, including within Azure. |AuditIfNotExists, Disabled |[1.0.2](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/MySQL_EnablePrivateEndPoint_Audit.json) |
32-
|[Public network access should be disabled for MySQL flexible servers](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fc9299215-ae47-4f50-9c54-8a392f68a052) |Disabling the public network access property improves security by ensuring your Azure Database for MySQL flexible servers can only be accessed from a private endpoint. This configuration strictly disables access from any public address space outside of Azure IP range and denies all logins that match IP or virtual network-based firewall rules. |Audit, Deny, Disabled |[2.2.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/MySQL_FlexibleServers_DisablePublicNetworkAccess_Audit.json) |
30+
|[Public network access should be disabled for MySQL flexible servers](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fc9299215-ae47-4f50-9c54-8a392f68a052) |Disabling the public network access property improves security by ensuring your Azure Database for MySQL flexible servers can only be accessed from a private endpoint. This configuration strictly disables access from any public address space outside of Azure IP range and denies all logins that match IP or virtual network-based firewall rules. |Audit, Deny, Disabled |[2.3.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/MySQL_FlexibleServers_DisablePublicNetworkAccess_Audit.json) |
3331
|[Public network access should be disabled for MySQL servers](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fd9844e8a-1437-4aeb-a32c-0c992f056095) |Disable the public network access property to improve security and ensure your Azure Database for MySQL can only be accessed from a private endpoint. This configuration strictly disables access from any public address space outside of Azure IP range, and denies all logins that match IP or virtual network-based firewall rules. |Audit, Deny, Disabled |[2.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/MySQL_DisablePublicNetworkAccess_Audit.json) |

‎includes/policy/reference/byrp/microsoft.dbforpostgresql.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.desktopvirtualization.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.devcenter.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.devices.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.deviceupdate.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.devopsinfrastructure.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.digitaltwins.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

‎includes/policy/reference/byrp/microsoft.documentdb.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,10 @@
11
---
22
ms.service: azure-policy
33
ms.topic: include
4-
ms.date: 05/23/2025
4+
ms.date: 06/23/2025
55
ms.author: jasongroce
66
author: jasongroce
7-
ms.custom:
8-
- generated
9-
- build-2025
7+
ms.custom: generated
108
---
119

1210
|Name<br /><sub>(Azure portal)</sub> |Description |Effect(s) |Version<br /><sub>(GitHub)</sub> |

0 commit comments

Comments
 (0)